Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/IwCBs-QU1g9_3bZiYNBrrg45D7U.roa
File: IwCBs-QU1g9_3bZiYNBrrg45D7U.roa (raw, json)
Hash identifier: YJ+2OllTqnoPh8q79dzRt93PEvXce5UAC3QgGbC34Cg=
Subject key identifier: 23:00:81:B3:E4:14:D6:0F:7F:DD:B6:62:60:D0:6B:AE:0E:39:0F:B5
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 01903459BBDDB3AE5EE92BB4C94D83E8FE2A
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/IwCBs-QU1g9_3bZiYNBrrg45D7U.roa
Signing time: Thu 20 Jun 2024 06:33:34 +0000
ROA not before: Thu 20 Jun 2024 06:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 91.107.72.0/21 maxlen: 21
185.91.132.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 05 Aug 2024 18:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:59:bb:dd:b3:ae:5e:e9:2b:b4:c9:4d:83:e8:fe:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Jun 20 06:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=230081b3e414d60f7fddb66260d06bae0e390fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:a0:14:0c:66:3e:83:f8:3d:fc:c3:53:9d:
66:58:ca:cc:16:bb:ea:69:13:cc:3a:fd:31:ff:74:
de:9b:86:3d:c5:e8:db:23:5d:c2:90:da:a7:d9:29:
56:e7:77:bc:38:81:21:27:ba:11:18:b6:ae:d1:31:
71:af:a7:9d:60:3e:ea:f7:6d:c1:2f:11:54:59:12:
10:a2:96:de:ee:0f:fe:6a:83:f7:9d:fa:5c:c9:06:
da:65:67:2a:18:5d:fc:ee:91:ec:6e:cf:fc:ae:75:
29:42:d9:c5:60:e6:5a:00:e0:03:a9:47:5a:86:be:
d9:eb:02:69:42:e1:4e:a7:58:e6:20:77:08:7d:ef:
19:55:a3:94:e6:9a:d1:a1:68:20:a5:7b:12:59:35:
7f:49:30:80:39:7b:5e:ea:65:84:8a:92:00:07:fb:
3b:23:18:12:1f:b8:51:16:23:6b:4f:8b:37:4b:b1:
26:eb:00:f1:05:ef:fa:53:9a:a2:69:e6:15:f9:18:
c2:42:e5:1b:79:40:06:b3:ac:27:e9:99:47:ef:c6:
7a:75:cd:7e:83:8a:a4:f9:28:d2:15:04:d6:ef:40:
b5:42:12:3f:5b:95:20:22:19:1e:57:33:c9:aa:fd:
5e:35:ff:3c:33:97:bc:90:2e:1c:08:c4:e9:ad:7e:
ae:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:00:81:B3:E4:14:D6:0F:7F:DD:B6:62:60:D0:6B:AE:0E:39:0F:B5
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/IwCBs-QU1g9_3bZiYNBrrg45D7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.72.0/21
185.91.132.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:7e:97:49:ec:ca:1d:03:91:ab:df:d6:b5:1e:bc:7a:5e:15:
84:01:40:08:c0:a3:dc:22:3e:ff:c5:f8:94:9c:32:74:99:28:
39:a5:00:22:af:13:78:5a:b5:a5:b4:ea:fa:e5:5f:75:52:7b:
08:bf:0f:73:f2:90:6a:61:8b:76:e9:71:24:9c:46:b1:c0:a5:
5b:55:b1:02:e2:3d:81:df:68:5d:79:ea:39:51:5d:55:f7:56:
c9:89:5a:b9:e7:0d:92:53:7a:b1:fc:cc:ae:60:39:8d:63:ce:
46:74:6d:d8:3d:53:07:3d:4a:13:5f:78:4b:08:fe:ca:b1:c7:
6c:1b:40:43:e1:77:f3:59:23:be:7e:a1:7c:8e:93:2e:2c:64:
c7:70:5e:cf:cd:e2:74:63:62:93:8e:86:73:c7:3a:6b:7c:e6:
27:29:87:21:7f:5b:80:ff:ba:9b:c4:db:1d:6c:69:eb:7c:74:
13:33:29:fb:9f:ec:df:64:ae:c1:15:2f:a7:5a:0c:76:44:6b:
87:b8:c6:dd:4a:25:d1:c4:d1:91:d8:8b:72:cb:d9:02:28:ed:
9a:8c:5e:5c:a4:a7:2f:b1:cf:61:31:c1:56:94:de:cc:7e:76:
a1:15:4b:f1:5f:89:2d:3f:e5:3c:e9:41:99:24:9f:46:76:75:
72:68:8e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 20:10:21 2024 by rpki-client on console-ams.rpki-client.org